Description

You design and secure enterprise application architectures.

Responsibilities

• Deconstruct enterprise application architectures (app server → DB → middleware → networking → dependencies).
• Build application threat models and publish the findings.
• Automate Application Security (AppSec) work using tooling, APIs, and CI/CD integration.
• Partner with application, service, and platform teams to capture accurate architecture details.
• Apply threat modeling methodologies (STRIDE, PASTA, etc.) to identify and prioritize threats.

Required Skills

• 4+ years in Systems Architecture and/or Systems Development.
• 3+ years of Cybersecurity experience.
• 1+ year experience with AWS, Azure, or GCP.
• 1+ year proficiency in Python programming.
• Proficiency in at least one Threat Modeling methodology (e.g., STRIDE/PASTA).
• Familiarity with OWASP Top 10, CAPEC, and MITRE ATT&CK.
• Experience with CI/CD integration and security logic within pipelines.
• Ability to run multiple threat models in parallel with short cycle times.

Key Skills

Education

Any Gradute